Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/jziUocfwwH9YlYLW-BO-D75CP8Q.roa
File: jziUocfwwH9YlYLW-BO-D75CP8Q.roa (raw, json)
Hash identifier: 3KIIhi01mRlObfSnmtk4tbUKq8wdoKyRT2o6topB8YA=
Subject key identifier: 8F:38:94:A1:C7:F0:C0:7F:58:95:82:D6:F8:13:BE:0F:BE:42:3F:C4
Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial: 01928A330475B8373ACF0A443E3282DFAF1B
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/jziUocfwwH9YlYLW-BO-D75CP8Q.roa
Signing time: Mon 14 Oct 2024 08:44:12 +0000
ROA not before: Mon 14 Oct 2024 08:44:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30722
IP address blocks: 94.32.32.0/19 maxlen: 24
193.207.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8a:33:04:75:b8:37:3a:cf:0a:44:3e:32:82:df:af:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
Validity
Not Before: Oct 14 08:44:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f3894a1c7f0c07f589582d6f813be0fbe423fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e2:e6:34:95:3c:40:cc:56:6d:e7:db:cb:80:
87:30:a6:37:ff:98:10:5b:cf:ff:db:b2:42:94:79:
4d:47:25:0b:1d:33:dc:ab:53:80:7a:05:53:f8:ea:
30:7a:39:09:29:a3:f0:d7:51:32:e7:21:94:f5:5e:
a3:e3:37:ea:1c:c0:48:d5:be:9a:06:94:3e:d7:4a:
de:ab:41:58:18:50:9c:fd:dd:eb:3f:2b:aa:f4:60:
7a:72:31:fa:82:ee:23:a2:db:5d:13:69:10:b2:de:
b9:17:16:4d:9d:93:88:16:00:f9:1f:db:c3:7a:da:
10:2d:7a:fb:bd:1f:06:0e:46:f4:64:70:09:21:34:
f3:ef:6c:1d:84:3a:57:9e:50:5a:80:e9:b9:66:8b:
2f:04:e8:92:a7:d2:87:b0:31:db:a6:41:cf:69:f9:
9e:01:bf:69:6a:96:ac:88:10:24:35:51:91:7f:72:
25:54:ed:85:93:e9:3c:cb:f8:ba:1a:ed:6c:a6:c9:
0b:07:03:37:1b:3b:8f:6a:11:a9:3f:96:49:ec:20:
38:94:12:30:00:29:db:cb:20:71:d5:7f:96:15:4c:
2f:c9:ac:e5:f9:78:77:b0:5e:0f:4d:a7:b5:8e:3f:
27:2a:1c:05:2f:10:e4:6c:92:b5:7b:7c:1a:d6:bf:
b4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:38:94:A1:C7:F0:C0:7F:58:95:82:D6:F8:13:BE:0F:BE:42:3F:C4
X509v3 Authority Key Identifier:
keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/jziUocfwwH9YlYLW-BO-D75CP8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.32.32.0/19
193.207.27.0/24
Signature Algorithm: sha256WithRSAEncryption
75:97:02:cf:d5:f2:8a:b9:f6:1b:ae:89:51:8c:47:a2:9d:3e:
64:87:be:88:3c:77:a2:72:91:e3:b4:26:5f:a0:5a:7c:77:71:
d5:a3:53:d2:5d:53:db:75:e8:9a:ac:58:62:c6:a4:fd:84:9c:
a9:97:e2:bb:14:94:0e:e9:bf:a1:35:2e:2e:3d:a5:73:7f:98:
fb:81:d8:df:22:30:6e:51:c8:bb:23:8d:82:b5:04:cf:64:7d:
14:17:f6:2e:28:ab:aa:31:87:84:2e:a1:10:61:9a:7e:d4:1f:
22:e4:39:d0:6d:82:4f:0d:bc:2e:b4:32:d4:3b:2b:cc:0f:db:
a7:06:73:cb:a7:86:70:99:41:b8:12:d9:01:9b:71:07:4a:36:
c7:e8:11:23:a5:47:2f:15:66:30:0e:af:5d:34:5a:e4:d3:00:
0e:b3:0a:d4:e8:d5:1c:92:ee:89:9a:16:58:50:db:b3:3b:ad:
3d:31:2f:54:4d:6e:ab:8b:54:1b:81:f8:c1:78:b1:05:83:0f:
6f:10:b1:bf:a0:25:2c:c1:6e:16:0a:e5:a8:6b:4c:8a:2d:3f:
29:63:ed:33:51:f5:de:0a:f2:5a:90:3c:8b:11:0a:91:cc:2e:
f3:b6:35:f5:30:e1:77:bb:7a:70:54:a1:25:89:7f:96:bc:76:
68:1b:df:6d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZKKMwR1uDc6zwpEPjKC368bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYjg2OTgzNTQ3MTEzMzU5YmFkZTFmM2YzODEwNDA5MWUz
YTY0MzkwHhcNMjQxMDE0MDg0NDEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjM4OTRhMWM3ZjBjMDdmNTg5NTgyZDZmODEzYmUwZmJlNDIzZmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouLmNJU8QMxWbefby4CHMKY3/5gQ
W8//27JClHlNRyULHTPcq1OAegVT+OowejkJKaPw11Ey5yGU9V6j4zfqHMBI1b6a
BpQ+10req0FYGFCc/d3rPyuq9GB6cjH6gu4jottdE2kQst65FxZNnZOIFgD5H9vD
etoQLXr7vR8GDkb0ZHAJITTz72wdhDpXnlBagOm5ZosvBOiSp9KHsDHbpkHPafme
Ab9papasiBAkNVGRf3IlVO2Fk+k8y/i6Gu1spskLBwM3GzuPahGpP5ZJ7CA4lBIw
ACnbyyBx1X+WFUwvyazl+Xh3sF4PTae1jj8nKhwFLxDkbJK1e3wa1r+00wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFI84lKHH8MB/WJWC1vgTvg++Qj/EMB8GA1UdIwQY
MBaAFM64aYNUcRM1m63h8/OBBAkeOmQ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenJocGcxUnhFeldicmVIejg0RUVDUjQ2WkRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMzUzOWQtMzhjZC00NjVlLWE1N2Qt
ZGVlMmY2NTBkZDg2LzEvanppVW9jZnd3SDlZbFlMVy1CTy1ENzVDUDhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9mMzUzOWQtMzhjZC00NjVlLWE1N2QtZGVlMmY2NTBkZDg2
LzEvenJocGcxUnhFeldicmVIejg0RUVDUjQ2WkRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFXiAgAwQA
wc8bMA0GCSqGSIb3DQEBCwUAA4IBAQB1lwLP1fKKufYbrolRjEeinT5kh76IPHei
cpHjtCZfoFp8d3HVo1PSXVPbdeiarFhixqT9hJypl+K7FJQO6b+hNS4uPaVzf5j7
gdjfIjBuUci7I42CtQTPZH0UF/YuKKuqMYeELqEQYZp+1B8i5DnQbYJPDbwutDLU
OyvMD9unBnPLp4ZwmUG4EtkBm3EHSjbH6BEjpUcvFWYwDq9dNFrk0wAOswrU6NUc
ku6JmhZYUNuzO609MS9UTW6ri1QbgfjBeLEFgw9vELG/oCUswW4WCuWoa0yKLT8p
Y+0zUfXeCvJakDyLEQqRzC7ztjX1MOF3u3pwVKEliX+WvHZoG99t
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:54 2025 by rpki-client